General
- Target e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592.zip
- Size 5.4MB
- Sample260713-rtjrhaax6j
- SHA256 956d3765949d91acca44b04b872e6515afd1c0cdf42d3948d5fc5a6003b7a1b1
- MD5 6375a53b0a7e998d2149b6b7e9dcb21e
- SHA1 933bf10b37b1a88a0614ce6eebb046948cc20c33
- SHA512 b8d18139b2d2402ef4fef4fa27370f41e3cf1dbad65083496272513f163e18957556c3f4052c45d44d492717e2fb5b1fd8c1e3728349d5f0f5bcf59c1fd18ea9
- SSDEEP 98304:ZfXyqI2l0n/mB1G/dqp+CoYV9sJEgmdm6ORhJrAKNy5mVbgVZfmHNh6SgxbNtXAP:gv2l0n/GGlqp1oYPicdmHh9ARk6EthSU
- TLSH T12D46331578AF5549A4633D94367332B1CCB07A83F2B89085781E1C70F1CEFE697E9AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592
- Size 12.9MB
- SHA256 e2fdccae78b734f3f25504fbb388d846077ce910befa5a13ca08948f5e4e9592
- MD5 ca5f099b29a3908a8f45651f60512559
- SHA1 b4bb93d93be93d6f1f4ffe9785cdfe64e247078d
- SHA512 f8c2616deb49e2a7c650dfed81984eb8ad2d85deaa6b8ca11e6e488784fa9c3b5383c68b73c0034c4163cec71afa2ac22611554c0dc0f9f69516cf7521b4386e
- SSDEEP 196608:YjxaaIvDip9k0W48C1uWWm3SR41euQ4oa+DAN:YEami64JUWWmCLb4XH
- TLSH T130D64C03F67251DEC5FAC038962A7323F9B07CDD8634A76B469096622F71B24AE3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.